Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/84d70763-7350-325d-b5ae-78568efc30b7.roa
File:                     84d70763-7350-325d-b5ae-78568efc30b7.roa (raw, json)
Hash identifier:          fgxNDMr4t4MXDmxhRE6uCocWTOEMAHgn9D75gVHl0HI=
Subject key identifier:   21:D8:D4:CE:E5:DA:50:58:E1:F6:40:42:94:8A:E7:28:D0:4A:A4:CC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E4648441556B3468DAA91CF00
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/84d70763-7350-325d-b5ae-78568efc30b7.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        205.251.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:48:44:15:56:b3:46:8d:aa:91:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=2317c704-513e-4d32-90a6-b5631114f94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:a6:f0:72:81:77:08:28:dc:c7:ef:61:0f:
                    d9:7e:11:e0:ff:d5:1c:9e:f0:2e:70:8a:04:84:7e:
                    13:52:ea:72:43:f6:4c:a4:db:de:5d:64:43:f3:87:
                    88:de:c1:51:77:6d:d5:ef:04:ac:42:80:5d:48:01:
                    ac:eb:6b:7e:92:ba:03:ad:9b:72:3d:52:d9:cc:31:
                    29:97:7d:44:0d:ce:16:e2:5b:9b:15:6b:be:ed:b6:
                    0d:5e:06:74:f1:77:f1:74:11:44:e6:b2:1d:88:47:
                    8e:45:dd:36:8c:7c:e1:0f:63:a1:b1:90:20:ee:d3:
                    2d:6d:68:a9:9c:6d:e4:e1:48:2c:99:1d:93:7d:2a:
                    46:ad:32:76:c7:41:48:12:a8:08:a1:de:10:3e:23:
                    c9:2b:a8:e7:03:1e:c1:46:3d:89:fd:8e:7b:bc:80:
                    54:e3:76:67:6c:61:65:5b:c0:35:5c:10:94:34:0d:
                    bc:af:1d:49:99:a5:1b:97:61:05:d2:b4:fe:71:5e:
                    c7:ab:8f:62:3d:8c:4f:c8:54:cd:c7:c8:d8:6f:d0:
                    73:c4:5a:56:e1:9e:85:7f:1a:ad:f5:cb:46:6e:d3:
                    ac:9d:a4:41:4c:14:08:8f:c1:cd:28:d9:78:47:de:
                    2a:94:46:eb:02:6b:b2:20:f0:e2:37:7e:6d:0a:f2:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:D4:CE:E5:DA:50:58:E1:F6:40:42:94:8A:E7:28:D0:4A:A4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/84d70763-7350-325d-b5ae-78568efc30b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:38:f1:66:57:25:2b:63:2b:10:95:4e:0a:42:34:38:74:
         d6:db:68:12:72:aa:79:e1:26:17:19:0c:a0:92:b1:8c:ea:5f:
         41:88:12:44:82:1f:12:4c:e0:4e:f5:af:77:a5:e7:7c:d9:e0:
         46:bb:e3:89:c7:79:62:76:d6:dc:1c:e2:f7:1a:ba:df:b7:28:
         28:e1:81:a6:7f:1c:21:70:6f:e3:9b:fc:0a:4f:35:f4:00:6e:
         8d:ee:6d:54:5c:63:77:99:75:79:b4:28:dd:6b:ed:67:d8:dd:
         66:ca:c9:5b:7d:6b:a2:08:5e:97:1f:c2:7e:07:a7:c7:f2:44:
         8a:41:11:93:91:3f:8c:0c:dc:95:cd:66:a1:6b:04:ca:92:66:
         44:a1:be:fa:53:0c:aa:81:e9:e6:60:38:b3:b1:99:78:89:4e:
         89:65:e5:78:5a:98:bc:9c:d6:3f:3e:ba:84:d6:bc:4b:65:39:
         55:26:b8:5b:28:60:40:60:be:83:9d:d9:0e:6b:30:3e:59:08:
         80:4c:2e:04:46:f5:f4:ad:05:aa:bf:f3:ba:41:93:cb:27:ed:
         d6:61:03:d1:67:61:61:f8:db:05:d3:7d:83:53:60:17:c1:48:
         6f:8a:40:a6:46:fc:9c:5c:1e:1b:ef:0e:46:57:58:68:e4:c2:
         ad:1b:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----